Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File: mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier: bB+urUf9gYD4B9UHBK53IIn4uu28aNwtn84RfjgnDAQ=
Subject key identifier: F8:AE:A4:F9:BB:8B:46:BC:53:E1:3C:D1:D2:0D:21:F8:67:F0:01:00
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer: /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial: 0198D6CDD039F25C20DBB8BD55CAC8E2BEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number: 09F1
Signing time: Sat 23 Aug 2025 12:01:09 +0000
Manifest this update: Sat 23 Aug 2025 12:01:09 +0000
Manifest next update: Sun 24 Aug 2025 12:01:09 +0000
Files and hashes: 1: _sJ1gEKp9zcUkmdoEUiL1Hgw__4.roa (hash: QNXdCikQmuLlbojTN81QhJiEfrR2COSucqfmF6ZaSHQ=)
2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: aIyEgWa+CP/UIHlv8V3acjLn1KG1Eva1DpN9DQ2+5GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:d0:39:f2:5c:20:db:b8:bd:55:ca:c8:e2:be:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Validity
Not Before: Aug 23 12:01:09 2025 GMT
Not After : Aug 24 12:01:09 2025 GMT
Subject: CN=f8aea4f9bb8b46bc53e13cd1d20d21f867f00100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:38:98:f2:c2:7f:44:c2:ab:f1:44:33:e5:66:
36:60:d5:ee:d4:e3:8d:4f:d6:d4:4a:0e:8b:2d:63:
4f:da:57:42:6d:83:f5:cb:5c:48:3e:a7:48:0b:7c:
52:4c:75:67:f5:79:db:fb:a6:01:de:1f:39:69:52:
02:ab:d5:4d:48:69:cd:81:8f:b4:aa:07:92:16:ce:
4f:63:2f:cb:5b:06:31:06:b0:5c:f0:50:c2:c9:f1:
e1:c2:d9:3d:b5:a4:93:8a:14:11:9b:56:2e:5c:3f:
10:48:b0:86:7e:39:39:87:1d:87:f0:29:39:78:93:
2d:d5:ad:1d:19:d0:9a:5c:e3:07:0f:16:48:5d:24:
c2:4c:29:e5:6d:38:80:be:5b:f0:74:f1:a5:f1:48:
98:bc:e9:a6:b0:58:e0:05:45:ee:ff:35:07:46:08:
10:e5:c4:03:aa:d0:68:f1:83:86:b4:cb:5c:ab:16:
c1:d5:ad:26:1b:3a:cf:55:81:6d:d3:9f:73:8f:74:
25:cd:89:a9:dc:d1:67:c5:b6:61:49:db:d6:9e:ca:
c8:33:42:66:95:df:94:f6:51:33:9d:66:c1:bd:d7:
89:a6:8d:08:16:c0:01:44:15:28:68:b1:df:1f:65:
a4:60:7a:e6:40:32:a3:ea:2e:96:e3:37:6a:a2:43:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AE:A4:F9:BB:8B:46:BC:53:E1:3C:D1:D2:0D:21:F8:67:F0:01:00
X509v3 Authority Key Identifier:
keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a8:fe:99:7b:3e:04:88:9a:4b:52:7b:9f:59:06:c7:a9:56:
24:89:c3:0a:87:95:15:cd:37:72:ed:14:c7:fa:71:31:5f:b4:
95:7a:de:41:6a:9c:0d:78:80:21:98:49:d3:4b:ff:b1:9f:16:
b9:b7:2c:37:22:8c:64:ce:f6:09:a1:52:28:04:c0:75:38:e0:
7a:4b:5b:3d:54:e8:2b:8e:cd:da:f8:a2:23:86:b6:6a:2a:01:
69:5b:3d:a4:97:e7:a4:41:a3:f0:a9:55:76:57:b7:da:d0:5f:
5d:3a:2f:85:49:4a:62:17:4c:7b:43:57:e7:5b:bb:55:16:ca:
bd:be:83:13:5c:d8:e9:ae:de:14:87:83:15:b2:f3:37:59:88:
bf:e1:ad:72:21:3c:67:df:52:6d:4e:71:22:bb:de:62:97:82:
b3:f2:4c:9c:af:03:38:b3:70:52:98:2f:7d:0d:21:71:f7:70:
01:9e:46:09:68:02:c2:9b:d7:7b:8b:f4:6c:5b:84:7a:11:32:
f8:fb:d2:fa:f1:ed:b1:e1:b1:30:fb:a0:b6:8b:82:94:00:a2:
57:cb:13:06:36:ea:06:f9:e8:cc:e1:1d:b8:c3:35:1e:5e:10:
f0:26:00:5f:77:28:60:fc:ce:df:31:58:7d:90:f8:8f:1e:2c:
ac:4b:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:21 2025 by rpki-client